
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier: FCGFMNI77stg3cG9lXT3OSYRn/QgiAmpyS6Fgs88AS8=
Subject key identifier: 1E:CC:44:A1:F6:23:63:D2:95:F6:FC:39:1A:FF:90:2F:65:CC:5D:EF
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number: 031A
Signing time: Fri 27 Mar 2026 01:45:40 +0000
Manifest this update: Fri 27 Mar 2026 01:45:39 +0000
Manifest next update: Fri 03 Apr 2026 01:45:39 +0000
Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: mrE7zOutnEDHq499b+DhWI5Rzriw2zUqgBeRPLiU5sM=)
2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Validity
Not Before: Mar 27 01:45:39 2026 GMT
Not After : Apr 3 01:45:39 2026 GMT
Subject: CN=69c5e143-809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:15:60:73:d4:a1:2b:c3:d4:82:05:e1:47:
e8:b8:05:f6:48:76:1d:fd:5b:e7:f1:b2:f4:a6:d5:
18:c6:dc:9a:d8:aa:70:66:2f:c9:6f:54:63:ee:5b:
35:a0:8b:29:07:83:d0:e0:0d:e5:a8:92:25:8a:42:
66:64:8f:71:23:70:d2:72:c9:c8:ac:f9:b3:bd:0d:
8b:b2:75:7a:68:e4:b4:5a:39:c9:c8:37:b4:f8:42:
e0:38:e5:dd:be:16:bf:c3:79:33:41:01:93:6b:c4:
06:f0:e1:34:c1:02:c8:56:5a:51:9a:93:67:42:a2:
08:59:db:3e:6a:46:82:7a:c1:bd:e3:2c:42:f2:af:
dc:2e:26:55:90:e0:2b:06:c9:6e:e8:5b:46:9e:bb:
d6:57:3c:22:37:9d:26:e1:d6:2a:92:7a:dc:f4:d5:
6f:f6:bb:df:8f:11:aa:c1:6e:ac:66:0e:e0:89:11:
ac:43:a2:07:cd:32:17:b0:5f:33:d0:91:b1:2b:6c:
d7:44:ba:c8:77:3a:ef:be:ac:6a:d5:85:68:b0:f8:
a0:95:7f:71:5a:c1:f3:4e:74:fc:fb:e0:97:2c:f2:
ea:95:41:64:31:cc:31:ec:7a:80:a1:3c:9a:42:d0:
71:b4:40:ec:1a:c7:81:63:3b:2e:ce:eb:58:9f:ff:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:44:A1:F6:23:63:D2:95:F6:FC:39:1A:FF:90:2F:65:CC:5D:EF
X509v3 Authority Key Identifier:
keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:cd:c5:67:0c:2a:02:9c:11:78:a9:ff:bc:7e:76:aa:4e:
a7:27:6f:1f:2a:b6:16:6a:f0:65:68:3b:3a:75:bb:6f:5f:cd:
8e:4c:5b:87:09:47:3e:a3:36:d2:f4:4e:4f:f8:f9:12:21:51:
6f:83:bb:dd:2a:96:eb:9d:1c:8b:1d:da:6d:4d:eb:4b:1b:f2:
07:55:d6:bf:b5:58:d2:68:5a:b0:eb:51:e1:34:a8:c6:96:dc:
ec:55:30:8b:3b:4c:83:94:fc:14:66:b3:c5:ba:5a:ab:2b:c2:
34:b6:a1:e9:53:58:75:50:cb:b8:b9:fa:9c:d5:02:2b:5e:44:
a6:12:49:19:0f:36:2f:c6:1e:a5:f7:50:71:d0:49:67:f1:43:
20:83:f1:2d:1a:0c:81:a6:f6:66:e6:e4:b0:a3:b7:d3:9d:1d:
64:07:78:7d:c4:a9:ea:9d:d8:00:d5:18:f8:22:e7:68:41:ac:
89:09:70:d8:34:e3:2b:79:c1:9f:8f:7c:48:3f:47:6a:26:5b:
8b:02:cd:5b:88:04:c4:4d:e7:77:fd:66:b3:2d:1f:ff:b6:48:
38:77:2a:01:fe:db:8a:c7:1f:3b:87:55:f0:70:89:d6:19:42:
2d:a5:dc:a6:db:99:06:b8:80:66:16:ac:a4:5e:f2:f3:bd:c3:
99:f6:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:25 2026 by rpki-client